Network Security
Vulnerability Management
Privileged Access Management
Endpoint Security
Threat Hunting
Unified Endpoint Management
Email & Collaboration Security
Contents:
Western Digital announced that they discovered a network breach had affected their systems, starting March 26th.
Threat actors managed to obtain unauthorized access to several of the Company’s systems. While law authorities are still investigating, Western Digital claims the intruder already got to exfiltrate a certain amount of data.
However, at the moment the data storage giant Western Digital didn`t give any details on how their systems were compromised or who they suspect the adversary is.
The Consequences of the Attack
As the company is enforcing the necessary network security measures, it had to take some of its systems and services offline.
While Western Digital is focused on remediating this security incident, it has caused and may continue to cause disruption to parts of the Company’s business operations.
Consequently, since the security team discovered the breach, Western Digital’s My Cloud service users reported they couldn`t access their repositories. The service interruption affected the following products:
- My Cloud,
- My Cloud Home,
- SanDisk ibi,
- SanDisk Ixpand Wireless Charger,
- My Cloud Home Duo,
- My Cloud OS5.
According to Bleepingcomputer, cloud, proxy, web, authentication, emails, and push notifications had been unavailable for more than 24 hours.
Digital Western`s POV on the Network Breach
After finding the network breach, the team acted swiftly to enhance their system`s security and prevent further breaching.
Upon discovery of the incident, the Company implemented incident response efforts and initiated an investigation with the assistance of leading outside security and forensic experts
At this point in the investigation, the company stated that the attacker had access to some of the company data.
Based on the investigation to date, the company believes the unauthorized party obtained certain data from its systems and is working to understand the nature and scope of that data.
And if you liked this article, follow us on LinkedIn, Twitter, Facebook, and YouTube for more cybersecurity news and topics.
